User guide

Overview
Chapter 10: Working with Wireless Networks 313
Security
Protocol
Description
recommended for situations where you want to authenticate wireless stations,
and to encrypt the transmitted data.
Note: To use this security method, you must first configure either a RADIUS
server that supports 802.1x, or set up the network for use with the
Safe@Office EAP authenticator. For information on configuring a RADIUS
server, see Using RADIUS Authentication. on page 688 For information on
using the Safe@Office EAP authenticator, see Using the Safe@Office EAP
Authenticator on page 433.
WPA-Personal:
password
authentication,
encryption
The WPA-Personal security method (also called WPA-PSK) is a variation of
WPA-Enterprise that does not require an authentication server. WPA-
Personal periodically changes and authenticates encryption keys. This is
called rekeying.
This option is recommended for small networks, which want to authenticate
and encrypt wireless data, but do not want to install a RADIUS server or use
the Safe@Office EAP authenticator.
Note: The appliance and the wireless stations must be configured with the
same passphrase.
WPA2 (802.11i) The WPA2 security method uses the more secure Advanced Encryption
Standard (AES) cipher, instead of the RC4 cipher used by WPA and WEP.
When using WPA-Enterprise or WPA-Personal security methods, the
Safe@Office appliance enables you to restrict access to the wireless network
to wireless stations that support the WPA2 security method. If this setting is
not selected, the Safe@Office appliance allows clients to connect using both
WPA and WPA2.